Re: Cyber Security Awareness Month - Examples of Online events or Phishing

["Ullman, Catherine" <cende () BUFFALO EDU>]

Hi Kristen,

Would you be willing to share your questions?  We may want to do something like this for next year and would love to 
have a starting point that’s a little more EDU-friendly.  Feel free to reply off-list if you prefer.

Best,
Cathy


Dr. Catherine J Ullman
Senior Information Security Forensic Analyst
Information Security Office
University at Buffalo
cende () buffalo edu<mailto:cende () buffalo edu>



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Kristen Dietiker
Sent: Tuesday, September 1, 2020 9:29 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Cyber Security Awareness Month - Examples of Online events or Phishing

I've built an online scavenger hunt, modeled after one SANS did several weeks ago for their awareness summit: 
https://sites.google.com/view/ScavengerHuntStart (Not sure how long their site will be available.)

It uses Google forms and Google sites. Answers to clues on a Google form are used to create a key that becomes part of 
the URL of the next level (A Google site), which has another form with clues to unlock the third level. (Wrong answers 
won't generate the correct URL). The SANS version concluded with "finding the buried treasure" by generating 
coordinates for Google maps. I've ditched this part and just created an end page with a "Congrats, here's a reward" 
message. Those rewards will likely be cybersecurity & SCU themed wallpapers or Zoom backgrounds they can download right 
from the end page. I also hope to do drawings for small prizes.

I thought most of the SANS questions weren't really suitable for our faculty and staff and didn't really serve to drive 
behavioral change. I really tried to focus on creating clues and answers that addressed the common problems we see–such 
as account security. My questions are split between asking about SCU security resources, and advice that is found on 
our website, and security resources around the web. Most questions focus on using long passwords, password managers, & 
multi-factor auth, with the purpose of driving change in these areas. A few questions drive people to external 
resources they can use to assess personal security risk.

--
Kristen Dietiker
Chief Information Security Officer
Santa Clara University
(408) 554-5554



On Mon, Aug 31, 2020 at 2:28 PM Royse, Rhonda - (rroyse) <rroyse () arizona edu<mailto:rroyse () arizona edu>> wrote:
Good afternoon everyone!

I are prepping for our online Cybersecurity Awareness month, and I recall a few universities who have administered 
online phishing quizzes, or games. Would appreciate any examples or campaigns that you could share!

We are looking at phishing instances or even small videos that can help explain key concepts to our audiences.

Thank you
Rhonda

[cid:image001.png@01D6811B.9741CBA0]

Rhonda Bartz-Royse
DCIO/IT Security Program/IAM – Manager
Information Security Office
THE UNIVERSITY OF ARIZONA

Computer Center
PO Box 210073 | Tucson, AZ 85721
Office: 520-621-5927 | Cell: 480-209-6465
rroyse () arizona edu<mailto:rroyse () arizona edu>

security.arizona.edu<https://urldefense.com/v3/__https:/security.arizona.edu/__;!!MLMg-p0Z!XXgIy1D9gBAybI6cB1PvPX_huscU1sk7CJURPvLTlB1oEy7lZrlnluJWpPmsiGU-$>
facebook<https://urldefense.com/v3/__https:/www.facebook.com/UArizonaInfoTech/__;!!MLMg-p0Z!XXgIy1D9gBAybI6cB1PvPX_huscU1sk7CJURPvLTlB1oEy7lZrlnluJWpLRhDhPP$>
 | 
twitter<https://urldefense.com/v3/__https:/twitter.com/UaInfotech__;!!MLMg-p0Z!XXgIy1D9gBAybI6cB1PvPX_huscU1sk7CJURPvLTlB1oEy7lZrlnluJWpF5HHz7R$>
 | 
instagram<https://urldefense.com/v3/__https:/www.instagram.com/uainfotech/__;!!MLMg-p0Z!XXgIy1D9gBAybI6cB1PvPX_huscU1sk7CJURPvLTlB1oEy7lZrlnluJWpO0q57iv$>
 | 
linkedin<https://urldefense.com/v3/__https:/www.linkedin.com/school/the-university-of-arizona__;!!MLMg-p0Z!XXgIy1D9gBAybI6cB1PvPX_huscU1sk7CJURPvLTlB1oEy7lZrlnluJWpGSdtrVW$>




**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.com/v3/__https:/www.educause.edu/community__;!!MLMg-p0Z!XXgIy1D9gBAybI6cB1PvPX_huscU1sk7CJURPvLTlB1oEy7lZrlnluJWpLV00yGH$>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community